- name: Acquire a keytab
  include_role:
    name: keytab/service
  vars:
    kt_location: "/etc/openshift_apps/{{app}}/{{key}}.kt"

- name: Call `oc secrets new` on the copied file
  shell: oc -n {{app}} secrets new {{secret_name}} {{key}}=/etc/openshift_apps/{{app}}/{{key}}.kt
  register: create_out
  failed_when: "create_out.rc != 0 and 'AlreadyExists' not in create_out.stderr"
